Changeset 7c44c12 in Klonkt for src

Timestamp:

06/24/2026 01:45:21 PM (3 months ago)

Author:

Robin Genis <roboburr@…>

Branches:

main

Children:

de3d24b

Parents:

a885afc

Message:

feat(account): editable username (does not affect the fediverse handle)

Username field in the profile form + validation (format, reserved, unique).
The AP handle is the site slug, so renaming the login name is purely cosmetic.

Co-Authored-By: Claude <noreply@…>

Location:

src

Files:

• routes/account.js (modified) (1 diff)
• services/i18n.js (modified) (3 diffs)
• views/pages/account.ejs (modified) (1 diff)

src/routes/account.js

@@ -124 +124 @@
 
 // ==================== UPDATE BIO ====================
+const RESERVED_USERNAMES = new Set(['admin', 'account', 'auth', 'login', 'register', 'logout', 'user', 'users', 'api', 'fediverse', 'posts', 'media', 'audio', 'assets', 'cirkel', 'authorize_interaction']);
+
 router.post('/profile', requireAuth, (req, res) => {
   const bio = (req.body.bio || '').toString().slice(0, 500).trim();
+
+  // Username (login + display name; does NOT affect the fediverse handle, which
+  // is the site slug). Validate: format + reserved + unique (case-insensitive).
+  const username = (req.body.username || '').toString().trim();
+  if (username && username !== req.session.user.username) {
+    if (!/^[A-Za-z0-9_-]{2,30}$/.test(username)) {
+      return res.redirect('/account?error=' + encodeURIComponent('Gebruikersnaam: 2-30 tekens; letters, cijfers, _ en - .'));
+    }
+    if (RESERVED_USERNAMES.has(username.toLowerCase())) {
+      return res.redirect('/account?error=' + encodeURIComponent('Die gebruikersnaam is gereserveerd.'));
+    }
+    const uTaken = db.prepare('SELECT 1 FROM users WHERE LOWER(username) = LOWER(?) AND id != ?').get(username, req.session.user.id);
+    if (uTaken) {
+      return res.redirect('/account?error=' + encodeURIComponent('Die gebruikersnaam is al in gebruik.'));
+    }
+    db.prepare('UPDATE users SET username = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?').run(username, req.session.user.id);
+    req.session.user.username = username;
+  }
 
   // Email (optionally also changed). Validation: valid format + not already in use

src/services/i18n.js

@@ -799 +799 @@
     'acct.member_since': 'Lid sinds',
     'acct.avatar_remove': 'Foto verwijderen',
+    'acct.username': 'Gebruikersnaam',
     'acct.email': 'E-mailadres',
     'acct.email_ph': 'jij@email.nl',
@@ -1792 +1793 @@
     'acct.member_since': 'Member since',
     'acct.avatar_remove': 'Remove photo',
+    'acct.username': 'Username',
     'acct.email': 'Email address',
     'acct.email_ph': 'you@email.com',
@@ -2785 +2787 @@
     'acct.member_since': 'Mitglied seit',
     'acct.avatar_remove': 'Foto entfernen',
+    'acct.username': 'Benutzername',
     'acct.email': 'E-Mail-Adresse',
     'acct.email_ph': 'du@email.de',

src/views/pages/account.ejs

@@ -71 +71 @@
       <form action="/account/profile" method="post" class="ax-form ax-form-bio">
         <label class="ax-field">
+          <span><%= t('acct.username') %></span>
+          <input type="text" name="username" value="<%= account.username %>" minlength="2" maxlength="30" pattern="[A-Za-z0-9_\-]{2,30}" autocomplete="username">
+        </label>
+        <label class="ax-field">
           <span><%= t('acct.email') %></span>
           <input type="email" name="email" value="<%= account.email || '' %>" maxlength="254" autocomplete="email" placeholder="<%= t('acct.email_ph') %>">